CVE-2015-4658

High

Published: 18/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Multiple SQL injection vulnerabilities in Milw0rm Clone Script 1.0 in admin/login.php allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.

Risk Assessment

An attacker could gain access to the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to validate and sanitize input data and to update the script to the latest version to minimize the risk of SQL injection.

Other vulnerabilities in Milw0rm Clone Script 1.0

CVE-2015-4137High
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.